Route Origin Authorization
$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136382e302f32342d3234203d3e2030.roa
File: 3138352e3231372e3136382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: f4EyJycTrAz119+P9kto4fV5JOOTyqEzWHyNGpiNcMM=
Subject key identifier: B4:F5:BF:FB:9B:54:BA:13:9A:2A:5D:B6:7A:10:5A:AF:3F:F2:57:28
Certificate issuer: /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial: 0851F85F61CDFAA69C82E0F7E5B3826DCC6FAEA5
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access: rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136382e302f32342d3234203d3e2030.roa
Signing time: Fri 03 Mar 2023 15:36:50 +0000
ROA not before: Fri 03 Mar 2023 15:31:50 +0000
ROA not after: Fri 01 Mar 2024 15:36:50 +0000
asID: 0
IP address blocks: 185.217.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:51:f8:5f:61:cd:fa:a6:9c:82:e0:f7:e5:b3:82:6d:cc:6f:ae:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Validity
Not Before: Mar 3 15:31:50 2023 GMT
Not After : Mar 1 15:36:50 2024 GMT
Subject: CN=B4F5BFFB9B54BA139A2A5DB67A105AAF3FF25728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:30:09:88:25:28:a0:71:35:33:ce:99:de:9b:
f4:54:6d:78:44:98:ad:e0:45:c0:3c:5d:1b:1f:ee:
fc:6a:5e:e4:32:f6:86:e1:4e:91:8f:55:8d:df:f6:
78:5e:5e:c5:74:1d:8e:41:26:f3:29:dd:cf:6e:33:
69:d0:ab:b4:00:c2:5e:dd:8b:1b:26:74:0d:70:36:
d5:93:a1:fb:f9:74:6e:58:f2:c0:05:c1:a4:0b:fe:
49:93:4c:9e:5a:d7:07:29:d6:83:80:13:01:08:b5:
b1:73:b3:b2:90:a5:06:03:23:bd:df:5b:76:1c:61:
42:a9:bb:dd:ce:7d:c5:48:68:e3:87:20:94:ce:ff:
86:c2:13:04:b8:0e:e3:ff:b0:45:4e:ac:d2:bb:55:
9d:fa:1a:b2:4c:89:fa:92:3f:bc:97:7b:ad:2e:d1:
20:76:c9:10:fd:d9:17:94:17:f6:c8:72:fa:9a:aa:
e5:58:22:5b:3b:a4:44:f3:80:28:53:c7:11:13:ab:
7a:9b:37:64:a4:2d:1c:30:31:b2:5a:4b:00:da:b7:
6a:08:d1:e2:fd:dc:fe:b5:12:c5:30:b0:1d:93:9a:
94:a7:05:11:d4:34:2a:d4:9a:92:55:d8:73:59:09:
26:e9:82:aa:6e:a2:f1:6d:76:8b:5b:02:b0:10:b9:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:BF:FB:9B:54:BA:13:9A:2A:5D:B6:7A:10:5A:AF:3F:F2:57:28
X509v3 Authority Key Identifier:
keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231372e3136382e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4f:23:04:42:16:c9:63:ba:c1:a0:02:34:8b:47:49:2b:8d:
5e:9e:f2:aa:07:32:d0:90:22:96:00:40:f7:4c:9d:b5:97:cf:
51:93:33:5b:02:80:4e:92:6b:d5:42:44:f5:41:19:c4:86:09:
4e:93:aa:45:11:c6:27:fe:a3:74:1e:99:4d:6d:9c:b6:52:23:
7b:88:05:e3:ff:60:87:5f:23:8b:51:72:67:9d:19:e0:81:51:
7d:f7:41:a1:94:b1:7e:0c:f8:38:f5:b5:f9:25:4c:31:8c:73:
50:66:1c:90:85:4b:2b:1b:df:cf:fe:5d:44:61:aa:d3:b8:d7:
85:79:a1:65:f9:5b:77:34:0b:e9:8f:5d:5b:39:ac:8e:84:e7:
e0:67:d2:9b:b7:c6:a2:36:2d:46:b4:ea:2e:8c:7a:59:ad:fb:
f2:51:69:1a:e9:f4:ea:1a:fa:3c:96:75:d7:58:a6:82:d3:33:
09:4c:d9:8f:6c:b4:c1:ec:9e:5b:99:dc:79:a0:82:6e:46:3d:
54:5f:54:35:68:48:3b:fc:0e:cd:53:c5:81:5e:10:13:a1:5c:
e0:4e:3d:2a:0f:50:ac:68:b5:67:5a:b8:ed:9d:3c:93:90:4e:
1e:37:ee:74:34:5b:21:c5:2c:af:b0:7c:78:dd:08:d7:36:72:
f6:37:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net